Glossary/Fraud and ethics

Subpoenas and records requests

A subpoena or records request asks a firm to produce client information, and the AICPA Code allows disclosure for a valid, enforceable subpoena while tax return information has separate legal limits.

CORAA TeamUpdated November 5, 2026

Definition

A subpoena is a legal order to produce documents or testimony. A records request can come from a regulator, a successor auditor, a lender or a client. The AICPA Confidential Client Information Rule (ET 1.700.001) allows a member to disclose information to comply with a validly issued and enforceable subpoena or summons. Section 7216 separately restricts use and disclosure of tax return information. When the IRS makes a proper and lawful request, Circular 230 section 10.20 requires a practitioner to submit the records promptly unless the practitioner has a good-faith belief on reasonable grounds that they are privileged. Section 7525 gives a limited privilege for tax advice, only in noncriminal tax matters before the IRS or in noncriminal federal court tax proceedings.

Why it matters in an audit or review

Firms hold sensitive records. A hasty release can breach confidentiality, and an ignored request can create penalties. Firms need a procedure that routes requests to a responsible partner and counsel.

Example

Illustrative: a firm receives a subpoena for a former audit client's workpapers. It logs the date, sends the document to counsel, checks validity and scope, notifies the client where permitted, and produces only what the order covers.

Common mistakes

  • Handing over a whole file when the subpoena asks for part of it.
  • Assuming the section 7525 privilege covers audit work or criminal matters.

Sources

Definitions paraphrase AICPA and FASB guidance; read the standard itself before relying on a requirement. Example figures are illustrative. This page is guidance, not professional advice. Report an error

Standards

AICPA Code ET 1.700.001IRC 7216Circular 230 10.20

Related terms

  • Confidentiality
    Confidentiality is the duty of a member not to disclose confidential client information without the client's consent, except in situations the AICPA Code allows, such as a subpoena or peer review.
  • Section 7216 (tax return preparer disclosure)
    Section 7216 of the Internal Revenue Code makes it a misdemeanor for a tax return preparer to knowingly or recklessly disclose or use return information beyond preparing the return, with limited exceptions.
  • Workpaper ownership
    Workpaper ownership concerns who holds rights to a firm's audit documentation, which professional standards treat as the auditor's property, while clients keep rights to their own records under the Code and state law.
  • Circular 230
    Circular 230, codified at 31 CFR Part 10, is the Treasury regulation governing practice before the IRS, setting duties of diligence, return standards, and sanctions for CPAs, attorneys, enrolled agents, and others.

Go deeper

All glossary terms →

For US CPA firms

Join the CORAA waitlist

CORAA AI drafts audit working papers from your client’s QuickBooks books and does the first pass: lead schedules, tie-out, memos, draft notes and letters. CORAA Network reviewers clear every finding. Your firm reviews and signs.

  • First audit free, so you can judge the quality on a real file
  • Flat fee by entity size; messy books included
  • We work only with CPA firms, never their clients
See how it works →

* required